Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6136410d-b038-3862-b3de-e62e33a5c16c.roa
File:                     6136410d-b038-3862-b3de-e62e33a5c16c.roa (raw, json)
Hash identifier:          KeAehjz847nKSydH5T3MP5WjScW2LdxgM2uALwjq9DY=
Subject key identifier:   19:64:64:94:E3:7A:8C:3E:21:98:16:59:B5:44:4A:34:1E:E8:D6:45
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F34B7FE32BFD59CE4DA380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6136410d-b038-3862-b3de-e62e33a5c16c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.129.112.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f3:4b:7f:e3:2b:fd:59:ce:4d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a2181e0d-ba76-4bd3-a9d4-52f1484dd210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:86:62:97:52:04:47:61:d1:bf:36:36:bb:
                    95:a1:c9:c7:24:d8:75:cf:fe:ff:d7:11:91:8c:42:
                    35:0d:6f:b8:0b:b9:78:32:4b:b3:92:31:a0:33:3c:
                    60:45:41:ee:67:1b:c4:4d:8c:70:ca:06:50:16:7f:
                    86:25:f0:01:66:90:80:15:02:41:c9:a0:a8:35:a9:
                    37:de:98:00:9d:95:f3:d1:82:08:7b:25:a4:c1:de:
                    4a:50:a3:2a:f6:99:23:24:bf:59:ad:58:dd:00:21:
                    8a:04:4b:1d:3d:76:f9:da:42:35:2e:39:f9:36:fa:
                    8e:0b:0c:39:53:b2:e7:c0:e2:9a:73:8b:08:79:16:
                    e1:a8:ec:a8:55:0b:ef:36:ca:8e:27:88:29:25:a5:
                    eb:22:c0:f3:40:d5:b0:c8:f4:da:8d:d6:21:d7:9b:
                    78:20:fc:0e:98:c5:b2:de:37:9c:68:f2:78:14:f1:
                    e1:d9:da:27:55:ba:6c:56:b1:3c:a2:e6:98:a5:17:
                    f7:96:95:c3:4d:7b:c3:ba:44:30:81:d2:e0:dd:14:
                    92:79:f1:4f:c6:98:3b:13:25:1d:0c:a6:4d:f8:20:
                    e0:82:33:f4:c9:7c:61:94:4f:50:e4:76:c3:7e:98:
                    1d:47:a8:09:84:49:3b:5d:31:fe:2d:45:a0:83:cf:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:64:94:E3:7A:8C:3E:21:98:16:59:B5:44:4A:34:1E:E8:D6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6136410d-b038-3862-b3de-e62e33a5c16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:02:83:67:3b:fa:b4:1f:ed:3b:90:91:a6:47:22:79:c6:
         18:32:b1:a4:57:da:3f:99:e2:9b:11:49:46:ce:96:03:39:29:
         fb:87:0f:e2:33:1d:76:62:29:5f:a9:cd:80:14:b7:2e:0d:a1:
         e0:4f:a0:1a:8b:32:95:ae:bc:29:be:d9:07:03:1c:b1:4c:64:
         7c:1b:92:1f:25:62:08:ac:19:59:ad:45:62:1a:df:09:c9:a6:
         a8:74:ea:e5:45:78:1f:8a:6e:c8:20:91:12:df:66:49:1c:cb:
         c7:57:6e:b5:17:f3:e8:fb:a4:10:01:5d:b9:16:ce:91:93:2e:
         6b:54:16:09:a4:d1:63:6b:8a:6c:b6:b2:2c:72:c4:a9:f3:5a:
         0d:63:80:d7:fc:d1:54:8f:22:73:c4:a2:bf:cc:bc:94:fb:23:
         b0:ee:9f:44:aa:77:26:f9:45:a4:9b:c0:9d:13:93:df:23:e8:
         3b:c7:6d:f9:16:ed:80:3a:8d:3b:01:f9:b1:67:64:95:ea:16:
         d6:6f:7a:00:4e:2f:e8:81:00:d0:71:bb:dd:31:d4:2b:e6:89:
         8d:06:2c:eb:d1:15:7e:fa:ae:fd:af:be:04:f1:9d:f8:f4:ed:
         ea:ec:81:40:66:98:60:f0:c6:a7:34:83:f5:f3:37:9c:70:70:
         bb:7d:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:07:32 2025 by rpki-client